Method and apparatus for providing high security video session

ABSTRACT

A method and apparatus for allowing trials and court proceedings to occur in a virtual manner using a one way video session and a two way voice session are disclosed. During the trials or court proceedings, the defendants and their testimony can be viewed by judges and jurors who remain in isolated rooms with their identities masked. Judges and attorneys can verbally intercede during the proceedings via a two way voice session but the video session for the duration of the trial is one way.

This application is a continuation of U.S. patent application Ser. No.11/263,258, filed Oct. 31, 2005, which is currently allowed, and isherein incorporated by reference in its entirety.

The present invention relates generally to communication networks and,more particularly, to a method and apparatus for providing high securityvideo session for trial procedures in communication networks, e.g.,packet networks such as Service over Internet Protocol (SoIP) networks.

BACKGROUND OF THE INVENTION

As extremely high bandwidth access networks become more accessible toresidential subscribers, they enable service providers of these networksto integrate voice, video, and data, thereby providing more conveniencefor end customers and creating new service opportunities. Due to themulti-service nature of these new services, networks need to provideadditional functionalities to end customers to support integratedcontrol of these different types of services. For instance, criminaltrials today are increasingly unearthing a number of security issues.Both judges and juries may be exposed to threats as well as actualviolence in courthouses around the world.

Therefore, a need exists for a method and apparatus for providing highsecurity video session for trial procedures in a packet network, e.g., aSoIP network.

SUMMARY OF THE INVENTION

In one embodiment, the present invention enables trials and courtproceedings to occur in a virtual manner using a one way video sessionand a two way voice session in which defendants and their testimony canbe viewed by judges and juries who remain in isolated rooms with theiridentities masked. Judges and attorneys can verbally intercede duringthe proceedings via a two way voice session but the video session forthe duration of the trial is one way.

BRIEF DESCRIPTION OF THE DRAWINGS

The teaching of the present invention can be readily understood byconsidering the following detailed description in conjunction with theaccompanying drawings, in which:

FIG. 1 illustrates an exemplary Voice over Internet Protocol (VoIP)network related to the present invention;

FIG. 2 illustrates an exemplary Service over Internet Protocol (SoIP)network related to the present invention;

FIG. 3 illustrates an example of providing high security video sessionfor trial procedures in a packet network, e.g., a SoIP network, of thepresent invention;

FIG. 4 illustrates a flowchart of a method for providing high securityvideo session for trial procedures in a packet network, e.g., a SoIPnetwork, of the present invention; and

FIG. 5 illustrates a high level block diagram of a general purposecomputer suitable for use in performing the functions described herein.

To facilitate understanding, identical reference numerals have beenused, where possible, to designate identical elements that are common tothe figures.

DETAILED DESCRIPTION

To better understand the present invention, FIG. 1 illustratescommunication architecture 100 having an example network, e.g., a packetnetwork such as a VoIP network related to the present invention.Exemplary packet networks include Internet protocol (IP) networks,asynchronous transfer mode (ATM) networks, frame-relay networks, and thelike. An IP network is broadly defined as a network that uses InternetProtocol to exchange data packets. Thus, a VoIP network or a SoIP(Service over Internet Protocol) network is considered an IP network.

In one embodiment, the VoIP network may comprise various types ofcustomer endpoint devices connected via various types of access networksto a carrier (a service provider) VoIP core infrastructure over anInternet Protocol/Multi-Protocol Label Switching (IP/MPLS) based corebackbone network. Broadly defined, a VoIP network is a network that iscapable of carrying voice signals as packetized data over an IP network.The present invention is described below in the context of anillustrative VoIP network. Thus, the present invention should not beinterpreted to be limited by this particular illustrative architecture.

The customer endpoint devices can be either Time Division Multiplexing(TDM) based or IP based. TDM based customer endpoint devices 122, 123,134, and 135 typically comprise of TDM phones or Private Branch Exchange(PBX). IP based customer endpoint devices 144 and 145 typically compriseIP phones or IP PBX. The Terminal Adaptors (TA) 132 and 133 are used toprovide necessary interworking functions between TDM customer endpointdevices, such as analog phones, and packet based access networktechnologies, such as Digital Subscriber Loop (DSL) or Cable broadbandaccess networks. TDM based customer endpoint devices access VoIPservices by using either a Public Switched Telephone Network (PSTN) 120,121 or a broadband access network via a TA 132 or 133. IP based customerendpoint devices access VoIP services by using a Local Area Network(LAN) 140 and 141 with a VoIP gateway or router 142 and 143,respectively.

The access networks can be either TDM or packet based. A TDM PSTN 120 or121 is used to support TDM customer endpoint devices connected viatraditional phone lines. A packet based access network, such as FrameRelay, ATM, Ethernet or IP, is used to support IP based customerendpoint devices via a customer LAN, e.g., 140 with a VoIP gateway androuter 142. A packet based access network 130 or 131, such as DSL orCable, when used together with a TA 132 or 133, is used to support TDMbased customer endpoint devices.

The core VoIP infrastructure comprises of several key VoIP components,such the Border Element (BE) 112 and 113, the Call Control Element (CCE)111, VoIP related Application Servers (AS) 114, and Media Server (MS)115. The BE resides at the edge of the VoIP core infrastructure andinterfaces with customers endpoints over various types of accessnetworks. A BE is typically implemented as a Media Gateway and performssignaling, media control, security, and call admission control andrelated functions. The CCE resides within the VoIP infrastructure and isconnected to the BEs using the Session Initiation Protocol (SIP) overthe underlying IP/MPLS based core backbone network 110. The CCE istypically implemented as a Media Gateway Controller or a softswitch andperforms network wide call control related functions as well asinteracts with the appropriate VoIP service related servers whennecessary. The CCE functions as a SIP back-to-back user agent and is asignaling endpoint for all call legs between all BEs and the CCE. TheCCE may need to interact with various VoIP related Application Servers(AS) in order to complete a call that require certain service specificfeatures, e.g. translation of an E.164 voice network address into an IPaddress.

In order to illustrate how the different components operate to support aVoIP call, the following call scenario is used to illustrate how a VoIPcall is setup between two customer endpoints. A customer using IP device144 at location A places a call to another customer at location Z usingTDM device 135. During the call setup, a setup signaling message is sentfrom IP device 144, through the LAN 140, the VoIP Gateway/Router 142,and the associated packet based access network, to BE 112. BE 112 willthen send a setup signaling message, such as a SIP-INVITE message if SIPis used, to CCE 111. CCE 111 looks at the called party information andqueries the necessary VoIP service related application server 114 toobtain the information to complete this call. In one embodiment, theApplication Server (AS) functions as a SIP back-to-back user agent. IfBE 113 needs to be involved in completing the call; CCE 111 sendsanother call setup message, such as a SIP-INVITE message if SIP is used,to BE 113. Upon receiving the call setup message, BE 113 forwards thecall setup message, via broadband network 131, to TA 133. TA 133 thenidentifies the appropriate TDM device 135 and rings that device. Oncethe call is accepted at location Z by the called party, a callacknowledgement signaling message, such as a SIP 200 OK response messageif SIP is used, is sent in the reverse direction back to the CCE 111.After the CCE 111 receives the call acknowledgement message, it willthen send a call acknowledgement signaling message, such as a SIP 200 OKresponse message if SIP is used, toward the calling party. In addition,the CCE 111 also provides the necessary information of the call to bothBE 112 and BE 113 so that the call data exchange can proceed directlybetween BE 112 and BE 113. The call signaling path 150 and the callmedia path 151 are illustratively shown in FIG. 1. Note that the callsignaling path and the call media path are different because once a callhas been set up between two endpoints, the CCE 111 does not need to bein the data path for actual direct data exchange.

In order to illustrate how the different components operate to support aVoIP call, the following call scenario is used to illustrate how a VoIPcall is setup between two customer endpoints. A customer using IP device144 at location A places a call to another customer at location Z usingTDM device 135. During the call setup, a setup signaling message is sentfrom IP device 144, through the LAN 140, the VoIP Gateway/Router 142,and the associated packet based access network, to BE 112. BE 112 willthen send a setup signaling message, such as a SIP-INVITE message if SIPis used, to CCE 111. CCE 111 looks at the called party information andqueries the necessary VoIP service related application server 114 toobtain the information to complete this call. In one embodiment, theApplication Server (AS) functions as a SIP back-to-back user agent. IfBE 113 needs to be involved in completing the call; CCE 111 sendsanother call setup message, such as a SIP-INVITE message if SIP is used,to BE 113. Upon receiving the call setup message, BE 113 forwards thecall setup message, via broadband network 131, to TA 133. TA 133 thenidentifies the appropriate TDM device 135 and rings that device. Oncethe call is accepted at location Z by the called party, a callacknowledgement signaling message, such as a SIP 200 OK response messageif SIP is used, is sent in the reverse direction back to the CCE 111.After the CCE 111 receives the call acknowledgement message, it willthen send a call acknowledgement signaling message, such as a SIP 200 OKresponse message if SIP is used, toward the calling party. In addition,the CCE 111 also provides the necessary information of the call to bothBE 112 and BE 113 so that the call data exchange can proceed directlybetween BE 112 and BE 113. The call signaling path 150 and the callmedia path 151 are illustratively shown in FIG. 1. Note that the callsignaling path and the call media path are different because once a callhas been setup up between two endpoints, the CCE 111 does not need to bein the data path for actual direct data exchange.

Media Servers (MS) 115 are special servers that typically handle andterminate media streams, and to provide services such as announcements,bridges, transcoding, and Interactive Voice Response (IVR) messages forVoIP service applications.

Note that a customer in location A using any endpoint device type withits associated access network type can communicate with another customerin location Z using any endpoint device type with its associated networktype as well. For instance, a customer at location A using IP customerendpoint device 144 with packet based access network 140 can callanother customer at location Z using TDM endpoint device 123 with PSTNaccess network 121. The BEs 112 and 113 are responsible for thenecessary signaling protocol translation, e.g., SS7 to and from SIP, andmedia format conversion, such as TDM voice format to and from IP basedpacket voice format.

The network shown in FIG. 1 can be extended to become a SoIP networkthat supports multi-service applications including, but not limited to,video services. FIG. 2 illustrates a communication architecture 200having an example network, e.g., a packet network such as a SoIP networkrelated to the present invention. A SoIP network supports multi-serviceapplications including voice, data, and video services. In oneembodiment, a SoIP network that supports video services is describedbelow. In this SoIP network, voice services supported include, but arenot limited to, VoIP services; data services supported include, but arenot limited to, Instant Messaging (IM), electronic mail (email),internet access services, or any other IP based applications; and videoservices include, but are not limited to, Video on Demand (VoD),broadcast video, and video conferencing services.

A SoIP network that supports video services comprises an intelligentmulti-service endpoint device connected via packet access networks to aservice provider's SoIP core infrastructure employing Internet Protocol(IP) and/or Multi-Protocol Label Switching (MPLS) Protocols. Broadlydefined, a SoIP network is a network that is capable of carrying voice,video, and data signals as packetized data over an IP network. Thepresent invention is described below in the context of an illustrativeSoIP network that supports video services. Thus, the present inventionshould not be interpreted to be limited by this particular illustrativearchitecture.

Video endpoint device 232 and 233 are IP based intelligent multi-serviceendpoint device supporting voice, video, and data applications. Videoendpoint device 232 and 233 are signaling endpoints of applicationsessions, e.g. a VoIP session endpoint, an instant messaging endpoint,or a video session endpoint. In one embodiment, a video endpoint deviceis a standalone device that can be connected to home electronicappliances such as, but is not limited to, telephone 234 and 235, TV 236and 237, or Personal Computer (PC) 238 and 239. In another embodiment, avideo endpoint device can be integrated with a TV, a PC, or any homeappliances with a display.

The access networks are packet based. Packet based access networks 230and 231 use, but are not limited to, Frame Relay, ATM, Ethernet, IP, DSLor Cable broadband access network technologies to interconnect a videoendpoint device to a SoIP network that supports video services.

The core SoIP infrastructure that supports video services comprises ofseveral key components, such the Border Element (BE) 212 and 213, theCall Control Element (CCE) 211, SoIP related Application Servers (AS)214, Media Servers (MS) 215, Session Controller (SC) 241, Video ofDemand (VoD) Servers 242, Broadcast Servers (242), and Instant Messaging(IM) Servers 243. A BE resides at the edge of the SoIP coreinfrastructure and interfaces with customers endpoints over varioustypes of access networks. The functions supported by a BE include thosesupported by a BE as previously described in network 100 and FIG. 1. Inaddition, in a SoIP network that supports video services, a BE alsoserves as a gateway between a video endpoint device used by a subscriberand the SoIP core network that supports video services. All applicationsessions initiated by a SoIP subscriber must gain entry to the SoIP corenetwork via a BE. The functions supported by a CCE and a MS are the sameas those previously described in network 100 and FIG. 1. A SessionController (SC) resides within the SoIP infrastructure and is connectedto the BEs using an IP based signaling protocol such as, but is notlimited to, Session Initiation Protocol (SIP). A SC is responsible forsetting up all application session requests, such as VoIP call requests,video session requests, or data session requests, originated by acustomer within the network and interacts with, if necessary, theappropriate SoIP related AS in order to complete an application sessionthat requires certain service specific features originated by acustomer. A SC also keeps track of all sessions initiated by a customerfor session management and billing purposes as well. The functionssupported by a SoIP related AS include those supported by a VoIP AS aspreviously described in network 100 and FIG. 1. In addition, a SoIP ASalso supports all video specific application features. A VoD Server isresponsible for supporting video on demand video session requestsoriginated by a customer and sends the requested streaming videocontents, such as a movie, to the customer. A Broadcast Server isresponsible for supporting broadcast video session requested originatedby a customer and sends streaming broadcast video contents, such as TVchannels, to the customer. The VoD Server and the Broadcast Server sendsstreaming video contents to video endpoint devices using compressiontechnologies including, but are not limited to, Moving Picture ExpertsGroup (MPEG) 2, MPEG 4, MPEG 7, MPEG 21. An IM Server is responsible forsupporting IM applications involving multiple users. Instant Messagingis a form of electronic communication that involves immediate typed textcorrespondence between two or more users over the Internet who areonline simultaneously. IM is a text-based computer conference over theInternet between two or more people who are online at the same time.

In order to illustrate how the different components in a SoIP networkoperate to support video services, the following scenarios are used toillustrate how voice, data, and video sessions are setup between theSoIP network and a video endpoint. In one embodiment, a customer usingvideo endpoint device 232 at location A places a VoD session request tothe SoIP network that supports video services using TV 236. During thesession initiation, a setup signaling message is sent from videoendpoint device 232 to BE 212 using signaling path segment 250. BE 212will then send a setup signaling message, such as a SIP-INVITE messageif SIP is used, to SC 241 using signaling path segment 251. SC 241processes the session requests and forwards the request to theappropriate server for further processing. In this case, the request isa VoD session; therefore, the request will be forwarded to VoD Server242 using signaling path segment 252. SC 241 may interact with AS 214using signaling path segment 259 to verify customer's subscriptioninformation or to retrieve video specific applications or data in orderto complete the session request. Once the VoD session is verified, VoDServer 242 sends the requested VoD streaming contents to BE 212 usingdata path segment 262. BE 212 then forwards the requested VoD streamingcontents to video endpoint 232 using data path segment 260. Similarly, acustomer at location Z using TV 237 connected to video endpoint 233 canrequest a VoD session via SC 241 with streaming VoD contents sent by VoDServer 242. Note that a VoD server may be placed closer to end users ina packet access network to serve video endpoints in an alternativeembodiment.

In another embodiment, a customer using video endpoint device 232 atlocation A places a broadcast video session request to the SoIP networkthat supports video services using TV 236. During the sessioninitiation, a setup signaling message is sent from video endpoint device232 to BE 212 using signaling path segment 250. BE 212 will then send asetup signaling message, such as a SIP-INVITE message if SIP is used, toSC 241 using signaling path segment 251. SC 241 processes the sessionrequests and forwards the request to the appropriate server for furtherprocessing. In this case, the request is a broadcast video session for aparticular premium TV channel; therefore, the request will be forwardedto Broadcast Server 243 using signaling path segment 253. SC 241 mayinteract with AS 214 using signaling path segment 259 to verifycustomer's subscription information or to retrieve video specificapplications or data in order to complete the session request. Once thebroadcast session is verified, Broadcast Server 243 sends the requestedbroadcast video streaming contents to BE 212 using data path segment263. BE 212 then forwards the requested broadcast video streamingcontents to video endpoint 232 using data path segment 260. Similarly, acustomer at location Z using TV 237 connected to video endpoint 233 canrequest a broadcast video session via SC 241 with streaming broadcastvideo contents sent by Broadcast Server 243. Note that a Broadcastserver may be placed closer to end users in a packet access network toserve video endpoints in an alternative embodiment.

In another embodiment, a customer using video endpoint device 232 atlocation A places an IM session request to the video network using PC238. During the session initiation, a setup signaling message is sentfrom video endpoint device 232 to BE 212 using signaling path segment250. BE 212 will then send a setup signaling message, including loginand password information of the user, to SC 241 using signaling pathsegment 251. SC 241 processes the session requests and forwards therequest to the appropriate server for further processing. In this case,the request to sign on an IM session; therefore, the request will beforwarded to IM Server 244 using signaling path segment 254. SC 241 mayinteract with AS 214 using signaling path segment 259 to verifycustomer's subscription information or to retrieve IM specificapplications or data in order to complete the session request. Once theIM session is verified, IM Server 244 establishes the requested IM datapath to video endpoint 232 via BE 212 using data path comprising datapath segment 260 and 264. Similarly, a customer at location A using TV236 connected to video endpoint 232 or a customer at location Z using PC239 or TV 237 connected to video endpoint 233 can request an IM sessionvia SC 241 with IM functions provided by IM Server 244.

In another embodiment, a customer using video endpoint device 232 atlocation A places a VoIP session request destined to video endpointdevice 233 via the SoIP network that supports video services usingtelephone 234. During the session initiation, a setup signaling messageis sent from video endpoint device 232 to BE 212 using signaling pathsegment 250. BE 212 will then send a setup signaling message, such as aSIP-INVITE message if SIP is used, to SC 241 using signaling pathsegment 251. SC 241 processes the session requests and forwards therequest to the appropriate server for further processing. In this case,the request is a VoIP session for a call destined to a called party atlocation Z; therefore, the request will be forwarded to CCE 211 usingsignaling path segment 255. CCE may interact with AS 214 using signalingpath segment 259 to verify customer's subscription information or toretrieve VoIP specific applications or data in order to complete thesession request. The signaling flows to establish a VoIP call betweenvideo endpoint device 232 and 233 is similar to those describedpreviously in network 100 and FIG. 1. In one embodiment, the ApplicationServer (AS) functions as a SIP back-to-back user agent. Since BE 213needs to be involved in completing the call; CCE 211 sends another callsetup message, such as a SIP-INVITE message if SIP is used, to BE 213using signaling path segment 257. Upon receiving the call setup message,BE 213 forwards the call setup message, via packet access network 231 tovideo endpoint device 233 using signaling path segment 258. Videoendpoint device 233 then identifies telephone 235 and rings thattelephone. Once the call is accepted at location Z by the called party,a call acknowledgement signaling message, such as a SIP 200 OK responsemessage if SIP is used, is sent in the reverse direction back to the CCE211. After the CCE 211 receives the call acknowledgement message, itwill then send a call acknowledgement signaling message, such as a SIP200 OK response message if SIP is used, toward the calling party atlocation A using signaling path comprising signaling path segment 256and 250 via BE 212. In addition, the CCE 211 also provides the necessaryinformation of the call to both BE 212 and BE 213 so that the call dataexchange can proceed directly between BE 212 and BE 213. CCE 211 alsoprovides the call completion status of a VoIP call to SC 241. The callmedia path comprising media path segment 260, 261, and 265 areillustratively shown in FIG. 2. Note that the call signaling path andthe call media path are different because once a call has been setup upbetween two video endpoint devices, SC 241 and CCE 211 does not need tobe in the data path for actual direct data exchange.

As extremely high bandwidth access networks become more accessible toresidential subscribers, they enable service providers of these networksto integrate voice, video, and data, thereby providing more conveniencefor end customers and creating new service opportunities. Due to themulti-service nature of these new services, networks need to provideadditional functionalities to end customers to support integratedcontrol of these different types of services. For instance, criminaltrials today are increasingly unearthing a number of security issues.Both judges and juries are exposed to threats as well as actual violencein courthouses around the world.

To address this need, the present invention enables trials and courtproceedings (broadly defined as judicial proceedings) to occur in avirtual manner using a one way video session and a two way voice sessionin which defendants and their testimony can be viewed by judges andjuries who remain in isolated rooms with their identities masked. Judgesand attorneys can verbally intercede during the proceedings via a twoway voice session but the video session for the duration of the trial isone way.

FIG. 3 illustrates an example 300 of providing high security videosession for trial procedures in a packet network, e.g., a SoIP network,of the present invention. In FIG. 3, a trial is to be conducted betweentwo locations, location A and location Z. The judge and jurors arelocated at location A while the defendants and the attorneys are locatedat location Z. Court official can use TV 339 to establish a secure trialapplication session between location A and location Z. The secure trialapplication session is sent from video endpoint device 332 to SC 341using flow 350. Upon receiving the secure trial application sessionrequest, SC 341 sends a one way video session request to VideoConference Server 342 using flow 351 to establish the requested one wayvideo session between location A and location Z. Upon receiving the oneway video session request, Video Conference Server 342 forwards thevideo session request to video endpoint device 333 using flow 352 tocomplete the establishment of the requested one way video session. Notethat the direction of the video flow can be specified during the securetrail application session setup phase. The video flow is always set inthe direction from location Z to location A. Once the one way videosession is established, video signal captured by video camera 337 willbe sent via video endpoint devices 333 and 332 to TV 339 using the oneway flow 360. Court officials at location A can control video camera 337to zoom and scan as needed. Since the video session is a one waysession, only the court officials at location A can control the camerafunctions.

Thus, in accordance with the present invention, locations A and Z maynot even be in the same building. Furthermore, the present invention canbe extended to more than two locations, e.g., the judge may actually beat a different location (e.g., a third location) from the jurors, and soon.

SC 341 also sends a VoIP session request to CCE 343 using flow 353 toestablish the requested VoIP session between location A and location Z.Upon receiving the VoIP session request, CCE 343 forwards the VoIPsession request to video endpoint device 333 using flow 354 to completethe establishment of the requested VoIP session. Note that the VoIPsession is a two way voice session between location A and location Z.Once the VoIP session is established, voice communications between thetelephone 336 and telephone 338 can proceed over the VoIP media path viavideo endpoint devices 333 and 332 using flow 361.

FIG. 4 illustrates a flowchart of a method 400 for providing highsecurity video session for trial procedures in a packet network, e.g., aSoIP network, of the present invention. Method 400 starts in step 405and proceeds to step 410.

In step 410, the method receives a secure trial application sessionrequest from a subscriber between two specified locations. For example,the secure trial application session request is received by a SC.

In step 420, the method establishes a one way video session between thetwo specified locations. The SC sends a one way video session request toa Video Conference Server to establish the requested one way videosession. The direction of the video signal flow is also specified by thesubscriber who initiates the secure trial application session. Thedirection of the video flow is always in the direction from the locationwhere the defendant resides to the location where the judge and thejurors reside.

In step 430, the method establishes a two way VoIP session between thetwo specified locations. The SC sends a VoIP session request to a CCE toestablish the requested two way VoIP session between the two specifiedlocations.

In step 440, the method allows the court proceedings to be conducted,e.g. the one way video signal and the two way voice conversations aresent over the network to enable communications.

In step 450, the method checks if video camera adjustment commands arereceived from the controlling party of the one way video session. Cameraadjustment functions allow the controlling party to zoom and scan asneeded. The camera adjustment command is received by a video endpointdevice connected to the video camera and sent to the video camera toexecute the requested adjustments. If video camera adjustment commandsare received, the method proceeds to step 460; otherwise, the methodproceeds to step 470.

In step 460, the method executes the received adjustment commands. Thecamera adjustment commands, such as zoom and scan, are executed by thecamera when the commands are received.

In step 470, the method checks if a secure trial session terminationsignal has been received. The session termination signal is received bythe SC. If a trial session termination signal has been received, themethod proceeds to step 480; otherwise, the method proceeds back to step440.

In step 480, the method terminates the one way video session and the twoway VoIP session. The sessions are terminated by the SC. The method endsin step 490.

FIG. 5 depicts a high level block diagram of a general purpose computersuitable for use in performing the functions described herein. Asdepicted in FIG. 5, the system 500 comprises a processor element 502(e.g., a CPU), a memory 504, e.g., random access memory (RAM) and/orread only memory (ROM), a high security video session for trialprocedures module 505, and various input/output devices 506 (e.g.,storage devices, including but not limited to, a tape drive, a floppydrive, a hard disk'drive or a compact disk drive, a receiver, atransmitter, a speaker, a display, a speech synthesizer, an output port,and a user input device (such as a keyboard, a keypad, a mouse, and thelike)).

It should be noted that the present invention can be implemented insoftware and/or in a combination of software and hardware, e.g., usingapplication specific integrated circuits (ASIC), a general purposecomputer or any other hardware equivalents. In one embodiment, thepresent high security video session for trial procedures module orprocess 505 can be loaded into memory 504 and executed by processor 502to implement the functions as discussed above. As such, the present highsecurity video session for trial procedures process 505 (includingassociated data structures) of the present invention can be stored on acomputer readable medium or carrier, e.g., RAM memory, magnetic oroptical drive or diskette and the like.

While various embodiments have been described above, it should beunderstood that they have been presented by way of example only, and notlimitation. Thus, the breadth and scope of a preferred embodiment shouldnot be limited by any of the above-described exemplary embodiments, butshould be defined only in accordance with the following claims and theirequivalents.

1. A method for providing high security video session in a communicationnetwork, comprising: receiving a request from a subscriber forestablishing at least two application sessions via said communicationnetwork, where said at least two application sessions are for use in ajudicial proceeding; and establishing said at least two applicationsessions between at least two endpoint locations, where a firstapplication session of said at least two application sessions is forproviding a one way video session and a second application session ofsaid at least two application sessions is for providing a two way voicesession.
 2. The method of claim 1, wherein said communication network isa Service over Internet Protocol (SoIP) network.
 3. The method of claim1, wherein said request is received by a Session Controller.
 4. Themethod of claim 1, wherein a video flow direction of said one way videosession is selected by said subscriber.
 5. The method of claim 4,wherein said video flow direction is from a first location where adefendant resides to a second location where at least one of: a judge ora jury resides.
 6. The method of claim 5, wherein said establishingfurther comprises: allowing only a party located at said second locationto control a camera adjustment function comprising at least one of: azoom function or a scan function.
 7. The method of claim 1, wherein saidone way video session is displayed in an independent display frame on avideo display device used by said party.
 8. The method of claim 1,wherein said second application session is a Voice over InternetProtocol session.
 9. The method of claim 1, wherein said one way videosession is established by a Session Controller by forwarding a videosession setup signaling message to a Video Conference Server toestablish said video session between said at least two endpointlocations.
 10. The method of claim 1, wherein said two way voice sessionis established by a Session Controller by forwarding a VoIP sessionsetup signaling message to a Call Control Element to establish said twoway voice session between said at least two endpoint locations.
 11. Acomputer-readable medium having stored thereon a plurality ofinstructions, the plurality of instructions including instructionswhich, when executed by a processor, cause the processor to perform thesteps of a method for providing high security video session in acommunication network, comprising: receiving a request from a subscriberfor establishing at least two application sessions via saidcommunication network, where said at least two application sessions arefor use in a judicial proceeding; and establishing said at least twoapplication sessions between at least two endpoint locations, where afirst application session of said at least two application sessions isfor providing a one way video session and a second application sessionof said at least two application sessions is for providing a two wayvoice session.
 12. The computer-readable medium of claim 11, whereinsaid communication network is a Service over Internet Protocol (SoIP)network.
 13. The computer-readable medium of claim 11, wherein saidrequest is received by a Session Controller.
 14. The computer-readablemedium of claim 11, wherein a video flow direction of said one way videosession is selected by said subscriber.
 15. The computer-readable mediumof claim 14, wherein said video flow direction is from a first locationwhere a defendant resides to a second location where at least one of: ajudge or a jury resides.
 16. The computer-readable medium of claim 15,wherein said establishing further comprises: allowing only a partylocated at said second location to control a camera adjustment functioncomprising at least one of: a zoom function or a scan function.
 17. Thecomputer-readable medium of claim 11, wherein said one way video sessionis displayed in an independent display frame on a video display deviceused by said party.
 18. The computer-readable medium of claim 11,wherein said second application session is a Voice over InternetProtocol session.
 19. The computer-readable medium of claim 11, whereinsaid one way video session is established by a Session Controller byforwarding a video session setup signaling message to a Video ConferenceServer to establish said video session between said at least twoendpoint locations; and wherein said two way voice session isestablished by a Session Controller by forwarding a VoIP session setupsignaling message to a Call Control Element to establish said two wayvoice session between said at least two endpoint locations.
 20. Anapparatus for providing high security video session in a communicationnetwork, comprising: means for receiving a request from a subscriber forestablishing at least two application sessions via said communicationnetwork, where said at least two application sessions are for use in ajudicial proceeding; and means for establishing said at least twoapplication sessions between at least two endpoint locations, where afirst application session of said at least two application sessions isfor providing a one way video session and a second application sessionof said at least two application sessions is for providing a two wayvoice session.